axoflow / axosyslog

AxoSyslog - the scalable security data processor
https://axoflow.com
Other
42 stars 13 forks source link

CVE detection in CI #190

Closed alltilla closed 1 week ago

alltilla commented 2 weeks ago

Based on a suggestion from @ikheifets-splunk: https://github.com/axoflow/axosyslog/issues/186#issuecomment-2208933715

ikheifets-splunk commented 2 weeks ago

I published PR for that issue and I tested on my fork and it's working.

Only one thing I wanna highlight we on CI allowing it to fail (I mean that non blocking release), because some of the security might be unresolved or problematically solve it asap. As I remember require policy for step available on Github settings.

ikheifets-splunk commented 1 week ago

@alltilla can you take a look?

alltilla commented 1 week ago

I am on PTO this week, but probably @MrAnno or @bshifter can help.